sssd-devel January 2021

sssd-devel@lists.fedorahosted.org

4 participants
50 discussions

[sssd PR#5467][opened] SBUS: set sbus_name before dp_init_send()
by alexey-tikhonov 22 Jan '21

22 Jan '21

URL: https://github.com/SSSD/sssd/pull/5467 Author: alexey-tikhonov Title: #5467: SBUS: set sbus_name before dp_init_send() Action: opened PR body: """ Some async task might access sbus_name before dp_initialized() was executed Resolves: https://github.com/SSSD/sssd/issues/5466 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5467/head:pr5467 git checkout pr5467

2 10

[sssd PR#5376][opened] Update cert.c
by peptekmail 22 Jan '21

22 Jan '21

URL: https://github.com/SSSD/sssd/pull/5376 Author: peptekmail Title: #5376: Update cert.c Action: opened PR body: """ Sometimes generating a sshkey from a certificate fails. Looking at other implementations gives a hint about 0x80 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5376/head:pr5376 git checkout pr5376

6 8

[sssd PR#5438][opened] test_ca: Look for libsofthsm2 in libdir before falling back to hardcoded paths
by 3v1n0 21 Jan '21

21 Jan '21

URL: https://github.com/SSSD/sssd/pull/5438 Author: 3v1n0 Title: #5438: test_ca: Look for libsofthsm2 in libdir before falling back to hardcoded paths Action: opened PR body: """ Right now building SSSD in archs different from amd64 (at least in debian and derivatives) won't ever get the test_CA built because libsofthsm2 won't be found (leading also to #5397 at times). As per this, until they won't provide a pkg-config file (waiting for https://github.com/opendnssec/SoftHSMv2/issues/587) - Prioritize looking for libsofthsm2 in configured libdir (will help the developer case when using custom prefixes with custom softhsm2) - Fallback to /usr prefixes, supporting any arch (not only x86_64) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5438/head:pr5438 git checkout pr5438

3 16

[sssd PR#5439][opened] Tests: alltests: "ldap_library_debug_level" option to domain section
by madhuriupadhye 21 Jan '21

21 Jan '21

URL: https://github.com/SSSD/sssd/pull/5439 Author: madhuriupadhye Title: #5439: Tests: alltests: "ldap_library_debug_level" option to domain section Action: opened PR body: """ Configure single domain and check "ldap_library_debug_level" parameter. It consists of three test cases: 1. Check ldap_library_debug_level option with config-check 2. Set ldap_library_debug_level to zero and check corresponding logs 3. Set ldap_library_debug_level to two and check corresponding logs Verifies: Issue: #5178 Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1884207 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5439/head:pr5439 git checkout pr5439

3 18

[sssd PR#5426][opened] WiP: dhash tables are now created with count=0
by alexey-tikhonov 18 Jan '21

18 Jan '21

URL: https://github.com/SSSD/sssd/pull/5426 Author: alexey-tikhonov Title: #5426: WiP: dhash tables are now created with count=0 Action: opened PR body: """ whenever no useful size hint available Resolves: https://github.com/SSSD/sssd/issues/5134 (perhaps additional patch will be required) """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5426/head:pr5426 git checkout pr5426

2 20

[sssd PR#5437][opened] krb5_child: use proper umask for DIR type ccaches
by sumit-bose 18 Jan '21

18 Jan '21

URL: https://github.com/SSSD/sssd/pull/5437 Author: sumit-bose Title: #5437: krb5_child: use proper umask for DIR type ccaches Action: opened PR body: """ The current umask only had files in mind and hence only allowed read and write permissions for the user. If the new directory must be created for DIR type credentials caches the 'execute' permission is needed as well so that the user can change into the directory. This patch changes the umask to allow this if a DIR type credential cache is requested. Resolves: https://github.com/SSSD/sssd/issues/5436 :fixes: krb5_child uses proper umask for DIR type ccaches """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5437/head:pr5437 git checkout pr5437

2 9

[sssd PR#5455][opened] Removed leftovers after PR #5246
by alexey-tikhonov 18 Jan '21

18 Jan '21

URL: https://github.com/SSSD/sssd/pull/5455 Author: alexey-tikhonov Title: #5455: Removed leftovers after PR #5246 Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5455/head:pr5455 git checkout pr5455

2 11

[sssd PR#5458][opened] UTIL: find_domain_by_object_name_ex() changed log level (1-16 backport)
by alexey-tikhonov 18 Jan '21

18 Jan '21

URL: https://github.com/SSSD/sssd/pull/5458 Author: alexey-tikhonov Title: #5458: UTIL: find_domain_by_object_name_ex() changed log level (1-16 backport) Action: opened PR body: """ It's up to user of this function to judge if fail to parse fqname is a critical error. Reviewed-by: Pawel Polawski <ppolawsk(a)redhat.com> Reviewed-by: Sumit Bose <sbose(a)redhat.com> (cherry picked from commit bd2f38abe95645b9b16b12d12dac6008b0d2a03b) 1-16 backport for RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1910131 """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5458/head:pr5458 git checkout pr5458

3 12

[sssd PR#5462][opened] cache_req: ignore autofs not configured error
by pbrezina 18 Jan '21

18 Jan '21

URL: https://github.com/SSSD/sssd/pull/5462 Author: pbrezina Title: #5462: cache_req: ignore autofs not configured error Action: opened PR body: """ Otherwise we return ERR_OFFLINE for domains where autofs provider is not set (such as implicit files domain) which is undesirable. Steps to reproduce: 1. Enable implicit files domains and LDAP domain with autofs configured 2. Setup NFS server to export `/exports` with `/exports/home/test` 3. Add autofs mount points: ``` dn: ou=mount,dc=ldap,dc=vm ou: mount objectClass: organizationalUnit objectClass: top dn: nisMapName=auto.master,ou=mount,dc=ldap,dc=vm objectClass: nisMap objectClass: top nisMapName: auto.master dn: cn=/export/home,nisMapName=auto.master,ou=mount,dc=ldap,dc=vm objectClass: nisObject objectClass: top cn: /export/home nisMapEntry: auto.home nisMapName: auto.master dn: nisMapName=auto.home,ou=mount,dc=ldap,dc=vm objectClass: nisMap objectClass: top nisMapName: auto.home dn: cn=/,nisMapName=auto.home,ou=mount,dc=ldap,dc=vm objectClass: nisObject objectClass: top cn: / nisMapEntry: -fstype=nfs,rw master.ldap.vm:/export/home/& nisMapName: auto.home ``` 4. Run SSSD and autofs 5. cd to /exports/home/test The directory will not be mounted with the new autofs protocol. It will succeed with the old protocol. In both versions, you'll see that SSSD returned ERR_OFFLINE: ``` (2021-01-15 11:44:48): [be[implicit_files]] [sbus_issue_request_done] (0x0040): sssd.DataProvider.Autofs.GetEntry: Error [1432158215]: DP target is not configured ... (2021-01-15 11:44:49): [autofs] [cache_req_search_cache] (0x0400): CR #3: Looking up [auto.home:test] in cache (2021-01-15 11:44:49): [autofs] [cache_req_search_cache] (0x0400): CR #3: Object [auto.home:test] was not found in cache (2021-01-15 11:44:49): [autofs] [cache_req_search_ncache_add_to_domain] (0x2000): CR #3: This request type does not support negative cache (2021-01-15 11:44:49): [autofs] [cache_req_process_result] (0x0400): CR #3: Finished: Error 1432158212: SSSD is offline ``` """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5462/head:pr5462 git checkout pr5462

2 13

[sssd PR#5453][opened] gssapi: default pam_gssapi_services to NULL in domain section
by pbrezina 15 Jan '21

15 Jan '21

URL: https://github.com/SSSD/sssd/pull/5453 Author: pbrezina Title: #5453: gssapi: default pam_gssapi_services to NULL in domain section Action: opened PR body: """ We need to distinguish when the option is not set in domain section and when it is is explicitly disabled. Now if it is not set, domain->gssapi_services is NULL and we'll use value from the pam section. Without this change, the value in the pam section is ignored. """ To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/5453/head:pr5453 git checkout pr5453

3 26

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel January 2021